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(54) SECURITY FUNCTION INCORPORATED TYPE PERIPHERAL PROCESSOR 

(57)Abstract: 

PROBLEM TO BE SOLVED: To make information input/output 
with a peripheral processor impossible without interposing a 
security function part by making an information collation and 
registration part perform a processing corresponding to an 
instruction flowing through an input/output line. 
SOLUTION: An input/output control part 2 is composed of an 
input/output buffer 5 as an input/output connection control part 
connected to the input/output line from an information processor 

4 and a main processing part 3, a password collation and 
registration part 6 connected to the input/output line from the 
information processor 4 and connected to the input/output buffer 

5 and a password storage part 7. The password collation and 
registration part 6 exchanges information with the information 
processor 4 through the input/output line and performs a 
registration processing for registering a password and setting a 
password registration completion flag to the password storage part 
7 corresponding to a condition and a collation processing for 
collating the password. The input/output buffer 5 controls the 
connection/disconnection of the input/ output line to the main 
processing part 3 and the information processor 4 by an 
input/output buffer control signal from the password collation and 
registration part 6. 
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* NOTICES * 



JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect 
the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1]Are a peripheral processing unit connected to an information processor, and 
said peripheral processing unit, A main processing part which performs main 
processing, an I/O control unit arranged and connected between said information 
processor and said main processing part, and said I/O control unit, ** and others, An 
input~and-output connect control part which is connected to an input output line and 
said main processing part from said information processor, and performs connection 
and cutting of this input output line, An information collation registering part 
connected with said input output line at said input-and-output connect control part, 
an information storing part connected to said information collation registering part, 
and said information [ ** and others ] collation registering part, According to a 
specific command which flows through said input output line, information similar to a 
password or it which flows through said input output line. [ whether it stores in said 
information storing part, and ] Or a security function built-in peripheral processing 
unit comparing with information stored in said information storing part, controlling said 
input-and-output connect control part according to conditions, and changing 
connection and cutting of said input output line. 

[Claim 2]said information collation registering part — a time check — the security 
function built-in peripheral processing unit according to claim 1 restricting time, 
controlling said input output buffer, and changing connection and cutting of said input 
output line by having a part and clocking according to information similar to a 
password or it. 
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2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention relates to the peripheral processing unit which 

has a security function. 

[0002] 

[Description of the Prior Art]Since the peripheral processing unit connected to 
information processors (PC etc.) is prevented from being used improperly by the 3rd 
person, a security function may be provided. Conventionally, this security function 
was given to the information processor body. The conventional security function 
registers a password into the peripheral processing unit side, such as a hard disk, for 
example, and is performing processing whose information processor body compares 
the entered password and the registered password. 
[0003] 

[Problem(s) to be Solved by the Inventionjln this case, to a peripheral processing unit, 
although the protection with the password from an information processor body is 
possible, When a peripheral processing unit is extracted physically and it is connected 
to other information processors, even if the password is registered into the peripheral 
processing unit, since this is disregarded and can be accessed, the effect of a 
password is lost. 

[0004]This invention is having been made in view of the above-mentioned point, and 
giving a security function to the inside of a peripheral processing unit, Also in the case 
where the peripheral processing unit was separated from the information processor 
body, and is connected to other information processor bodies, The security function 



built-in peripheral processing unit which makes it impossible to perform information 
input and output with a peripheral processing unit via the security function part with 
which a peripheral processing unit is equipped is provided. 
[0005] 

[Means for Solving the Problem]A security function built-in peripheral processing unit 
of this invention, Are a peripheral processing unit connected to an information 
processor, and said peripheral processing unit, Consist of a main processing part 
which performs main processing, and an I/O control unit arranged and connected 
between said information processor and said main processing part, and said I/O 
control unit, An input-and-output connect control part which is connected to an input 
output line and said main processing part from said information processor, and 
performs connection and cutting of this input output line, Consist of an information 
collation registering part connected with said input output line at said 
input-and-output connect control part, and an information storing part connected to 
said information collation registering part, and said information collation registering 
part, According to a specific command which flows through said input output line, 
information similar to a password or it which flows through said input output line. 
[ whether it stores in said information storing part, and ] Or it compares with 
information stored in said information storing part, said input-and-output connect 
control part is controlled according to conditions, and connection and cutting of said 
input output line are changed. 

[0006]said information collation registering part — a time check — by having a part 
and clocking according to information similar to a password or it, time is restricted, 
said input output buffer is controlled, and connection and cutting of said input output 
line are changed. 
[0007] 

[Embodiment of the Invention]Hereafter, an embodiment of the invention is described 
with reference to drawings. 

[0008] Drawing 1 is a block diagram showing the composition of this invention as one 
embodiment The peripheral processing unit 1 of this embodiment consists of I/O 
control unit 2 and the main processing part 3, and is connected to the information 
processor 4. While being connected to the input output buffer 5 as an 
input-and-output connect control part connected to the input output line and the 
main processing part 3 from the information processor 4, and the input output line 
from the information processor 4, I/O control unit 2, It consists of the password 
storage 7 as the password examination registering part 6 as an information collation 



registering part connected to the input output buffer 5, and an information storing part 
connected to the password examination registering part 6. The password storage 7 is 
provided with a password registration completion flag. The password registration 
completion flag shall store 1 bit information at least. 

[0009]The password examination registering part 6 exchanges information through an 
input output line between the information processors 4. The password examination 
registering part 6 performs registration processing which performs registration of a 
password, and setting out of a password registration completion flag, and collation 
processing which performs collation of a password to the password storage 7 
according to conditions. The input output buffer 5 controls connection and cutting of 
the input output line to the main processing part 3 and the information processor 4 by 
the input-output-buffer control signal from the password examination registering part 
6. The main processing part 3 is a portion which performs original processing as the 
peripheral processing unit 1. The password storage 7 consists of rewritable 
nonvolatile memory storage. It can constitute, even if it uses the mechanical means of 
a relay etc. as an input-and-output connect control part instead of the input output 
buffer 5 which carries out electrical operation. 

[0010]Next, operation of the security function built-in peripheral processing unit 1 of 
this embodiment constituted in this way is explained. 

[001 1]When the user of the information processor 4 uses the peripheral processing 
unit 1, after connection of the information processor 4 and the peripheral processing 
unit 1, a password registration-confirmed command is executed first and it checks 
that the password is registered. Below, operation of password registration processing 
is explained with reference to the flow chart of drawing 2 . The step shown by a double 
line in drawing 2 shows the operation of those other than peripheral processing unit 1. 
[0012]First, this operation is started because a user publishes a password 
registration-confirmed command from the information processor 4 to the peripheral 
processing unit 1 (Step S201). 

[0013]Next, the command in which the password examination registering part 6 was 
published judges that it is a password registration-confirmed command (Step S202). 
[0014]In Step S202, when a command is a password registration-confirmed command, 
refer to the password registration completion flag in the password storage 7 for the 
password examination registering part 6 (Step S203). 

[0015]Next, it is judged whether the password examination registering part 6 has a 
password more nearly registered than the state of a password registration completion 
flag (Step S204). 



[0016]In Step S204, the password examination registering part 6 publishes a password 
registered notice to the information processor 4, when the password is registered 
(Step S205). Although it moves to the password examination processing (Step S306) 
shown in drawing 3 after this, it explains separately for details. 

[0017]In Step S204 f when the password is not registered, the password examination 
registering part 6 carries out password unregistered notice issue to the information 
processor 4 (Step S206). 

[0018]In the information processor 4 side which received the password unregistered 
notice, it asks whether to register a password to a user (Step S207). 
[0019]When a user judges that registration is required, a password registration 
instruction and a password are published to the peripheral processing unit 1 via the 
information processor 4 (Step S208). 

[0020]The command in which the password examination registering part 6 was 
published judges that it is a password registration instruction (Step S209). 
[0021 ]In Step S209, when a command is a password registration instruction, the 
password examination registering part 6 sets a password registration completion flag 
with registration of the password to the password storage 7 (Step S210). 
[0022]Next, operation of password examination processing is explained with reference 
to the flow chart of drawing 3 . The step shown by a double line also in drawing 3 shows 
the operation of those other than peripheral processing unit 1. 
[0023]A user publishes a password registration-confirmed command from the 
information processor 4 to the peripheral processing unit 1 again (Step S301). 
[0024]The command in which the password examination registering part 6 was 
published judges that it is a password registration-confirmed command (Step S302). 
[0025]In Step S302, when a command is a password registration-confirmed command, 
refer to the password registration completion flag in the password storage 7 for the 
password examination registering part 6 (Step S303). 

[0026]Next, it is judged whether the password examination registering part 6 has a 
registered password (Step S304). 

[0027]In Step S304, when the password is registered, the password examination 
registering part 6 publishes a password registered notice to the information processor 
4 (Step S305), and a user checks that the password has been registered. 
[0028]Next, a user publishes a password examination command and a password from 
the information processor 4 (Step S306). 

[0029]The command in which the password examination registering part 6 was 
published judges that it is a password examination command (Step S307). 



[0030]In Step S307, when a command is a password examination command, the 
password examination registering part 6 reads a registered password from the 
password storage 7 (Step S308). 

[0031 ]The password examination registering part 6 performs comparison with a 
registered password and an input password (Step S309). 
[0032]In Step S309, only when a comparison result is in agreement, an 
input-and-output enabling command is published from the password examination 
registering part 6 to the input output buffer 5 (Step S3 10). In this way, the transfer of 
information with the main processing part 3 of the I/O data from the information 
processor 4 is attained via the input output buffer 5. 

[0033]In Step S309, when passwords differ as a result of comparison, the password 
examination registering part 6 publishes the notice of password reinput to the 
information processing section 4 (Step S311), and moves from processing to Step 
S306. 

[0034]Password examination processing with the peripheral processing unit 1 is 
performed as mentioned above. 

[0035]The state of the input output buffers 5 immediately after powering on except a 
comparison result with the password entered by the registered password and the user 
being in agreement, in [ password ] not registering, etc. is usually made into an 
input-and-output prohibited state. 

[0036] Rewritable nonvolatile memory may be used so that the new command 
published from the information processor 4 in the password examination registering 
part 6 can be registered. As an example, when the peripheral processing unit 1 is a 
hard disk, the read-only command is beforehand registered to the password 
examination registering part 6 which is rewritable nonvolatile memory. In this example, 
when a read-only command is published from the information processor 4 to the 
peripheral processing unit 1 , and the password registration collating part 2 controls 
the input output buffer 5, the input from the information processor 4 to the main 
processing part 3 can be intercepted, and the write operation to the main processing 
part 3 can be forbidden. 

[0037]When the main processing part 3 consists of plurality, while arranging two or 
more input output buffers 5 according to each main processing part 3, it may be made 
to give the capacity which can register two or more passwords into the password 
storage 7. In this case, while registering two or more passwords into the password 
storage 7, When the main processing part 3 which can be accessed for every 
password is set as the password registration collating part 6 and the password 



registration collating part 6 controls each input output buffer 5 according to a 
password, the main processing part 3 can be chosen according to the kind of 
password published from the information processor 4. 

[0038]Two or more information processors 4 and two or more peripheral processing 
units 1 may use this selecting arrangement as the input output buffer 5 in the 
composition connected to selecting arrangements, such as HUB which chooses each 
device. In this case, while each peripheral processing unit 1 corresponds to the main 
processing part 3 of this embodiment and storing two or more passwords in the 
password storage 7 corresponding to each peripheral processing unit 1, By limiting the 
password published from each information processor 4 every information processor 4, 
it becomes possible for the usable peripheral processing unit 1 and a part to accept it 
information processor 4, and to perform distinction called the usable peripheral 
processing unit 1 from every information processor 4 connected to a selecting 
arrangement. 

[0039]Mechanical switches, such as a DIP switch, may be used for the password 
storage 7. In this case, the administrator of the peripheral processing unit 1 manages 
the password set up with a mechanical switch, and the password registration 
processing from the information processor 4 is omitted. The user of the information 
processor 4 and the peripheral processing unit 1 uses the password told by the 
administrator of the peripheral processing unit, and accesses the peripheral 
processing unit 1. 

[0040]as other examples — the password examination registering part 6 — further — 
a time check — the composition provided with a timer as a part is taken. In this case, 
divide the kind of password and a certain password is received, Clock by a timer, and 
only fixed time makes the input output buffer 5 enabling state, and makes a connected 
state the peripheral processing unit 1 and the information processor 4, The input 
output buffer 5 is made into an input-and-output prohibited state after fixed time 
from collation, and it also becomes possible to give functions, such as making the 
peripheral processing unit 1 and the information processor 4 into a cutting condition. 
[0041] 

[Effect of the Invention]The peripheral processing unit by this invention is separated 
from an information processor body, and it becomes impossible to output and input 
the information on a peripheral processing unit via the I/O control unit of this 
invention also in the case where it is connected to other information processors, A 
peripheral processing unit can be protected from the unauthorized use of peripheral 
equipment [ / in addition to a formal user ]. 



[0042]Since collation of a password is performed inside a device, the peripheral 
processing unit by this invention removes a peripheral processing unit from an 
information processor physically, and when it is connected with other information 
processors, it can require the same password. 

[0043]In the peripheral processing unit of this invention, without making a new 
interface, in order to perform password processing, where it seized the interface from 
an information processor and the information on the main processing part of a 
peripheral processing unit is intercepted, since controlling by software is also possible, 
flexibility is high. 

[0044] By what the flash ROM etc. which are nonvolatile memory rewritable to the 
password examination registering part as an information collation registering part are 
used, and programming of the contents is enabled for. It also becomes possible to 
perform various input/output control using the information published from an 
information processor besides password processing. 
[0045]Since the I/O control unit used by this invention is arranged at the 
input-and-output portion of each peripheral processing unit connected to information 
processors, such as PC, In the case where Universal Serial Bus etc. are used as a 
future peripheral processing unit, CRT, a hard disk, HUB, a printer, a scanner, etc. 
become possible [ performing password management with a common interface to all 
the peripheral processing units 1 when this invention is carried out by all the devices. 
[0046]the password examination registering part as an information collation 
registering part — further — a time check — by having a timer as a part, The kind of 
password is divided, it clocks by a timer according to a password, and it also becomes 
possible to give functions, such as only predetermined time making an input/output 
device a connected state, and making it into a cutting condition after that. 
[0047]Since the I/O control unit of this invention does not use the original function of 
a peripheral processing unit directly, it is usable only with adding to the present 
product. 



[Translation done.] 



* NOTICES * 



JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect 
the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is a figure showing the composition of the security function built-in 
peripheral processing unit which is one embodiment of this invention. 
[Drawing 2] It is a flow chart which shows the operation at the time of the password 
registration processing of the security function built-in peripheral processing unit 
which is one embodiment of this invention, 

[Drawing 3] It is a flow chart which shows the operation at the time of password 
examination processing of the security function built-in peripheral processing unit 
which is one embodiment of this invention. 
[Description of Notations] 

1 Peripheral processing unit 

2 I/O control unit 

3 Main processing part 

4 Information processor 

5 Input output buffer 

6 Password examination registering part 

7 Password storage 
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